Jobs › IT Cybersecurity Specialist
IT Cybersecurity Specialist
Job at a glance
- Category
- GRC
- Work arrangement
- On-site
- Location
- Portland, Oregon
- Salary range
- $96,443 to $125,378
- Posted
- Nov 10, 2026
- Closes
- November 18, 2026, at 11:59 p.m. Eastern Time
Free. One click to unsubscribe. We never share your address.
Bonneville Power Administration is hiring a IT Cybersecurity Specialist in Portland, Oregon. This is a GRC job in the governance, risk, and compliance field, with a posted range of $96,443 to $125,378. Review the full details below and apply directly with Bonneville Power Administration.
This position is located with Bonneville Power Administration, in the Cyber Security (JB) organization of Information Technology (J). A successful candidate in this position will coordinate cyber defense, align interagency strategy, and protect critical infrastructure alongside security leadership. If you excel at orchestrating security initiatives, solving complex operational challenges, and safeguarding vital infrastructure, bring your expertise to our mission!
Qualifications: BASIC REQUIREMENT: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. To meet this requirement, you must demonstrate proficiency in each of the four competencies listed above as follows: GS-12: Advanced - You can perform the actions associated with each of these competencies without assistance. You are recognized within your immediate organization as "a person to ask" when difficult questions arise regarding each of these competencies. Focus is on broad organizational/professional issues; You have consistently provided practical/relevant ideas and perspectives on process or practice improvements which may easily be implemented; You are capable of coaching others in the application of each of these competencies by translating complex nuances relating to each competency into easy to understand terms; You participate in senior level discussions regarding these competencies; You assist in the development of reference and resource materials in these competencies. SPECIALIZED EXPERIENCE REQUIREMENTS: A qualified candidate's resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level (GS-11) in the Federal service. Specialized experience for this position is defined as experience: 1) applying established planning methodologies, risk frameworks, and security guidelines to assist with project planning, task tracking, and operational coordination for cybersecurity programs or defensive operations; 2) serving as a liaison across organizational stakeholders to coordinate administrative and business services, track compliance or audit findings, and prepare operational documentation and briefings; and 3) providing administrative support including the development and preparation of reports, correspondence, agendas and other meeting materials, coordinating travel, and administering calendars of the CISO and organizational supervisors. "Experience" refers to paid and unpaid experience. Examples of qualifying unpaid experience may include: volunteer work done through National Service programs (such as Peace Corps and AmeriCorps); as well as work for other community-based philanthropic and social organizations. Volunteer work helps build critical competencies, knowledge, and skills; and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. You must meet all qualifications and eligibility requirements by the closing date of this announcement.
Full responsibilities and requirements are on Bonneville Power Administration's application page.
Apply for this job →Location and market context
This job is based in Portland, Oregon on-site. Local candidates benefit from being close to Bonneville Power Administration's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About cybersecurity governance jobs
Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.
How to position yourself for this cybersecurity governance job
Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Bonneville Power Administration would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location